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5 

Priority Application 

This application claims the benefit of U.S. Provisional Application No. 60/152,183 
filed September 2, 1999, incorporated herein by this reference. 

1 0 Cross Reference to Related Applications 

This application is related to U.S. Provisional Application No. 60/162,816 filed 
November 1, 1999, incorporated herein by this reference. 

Field of the Invention 

15 The present invention relates generally to the field of self-service financial transaction 

terminals, such as automatic teller machines (ATMs), and more particularly to a system and 
method for providing global self-service financial transaction terminals (ATMs) with 
worldwide web content to self-service ATM customers, including access for visually 
impaired customers, centralized management for ATM operators, and local and remote 

20 administration for ATM field service personnel. 

Background of the Invention 

Currently, ATM machines have limited support for display of web content, for remote 
management of the ATM, for remote software distribution, and for diagnostic 

25 troubleshooting. ATM machines include computer applications or software running on 
computer hardware within the ATM machine which, for example, interfaces with a host 
computer and other remote computers connected to the ATM machine over a network. On 
ATM systems that a financial institution, such as a bank, develops and that are used in 
branches or other locations, there are a set of functions that are used by supervisors and 

30 operators in the branch. These operator and supervisor functions are outside of the customer 
applications and need to be performed on a routine basis to maintain the service to administer 
those ATM machines. 

The ATM is essentially a machine that has a computer within it that runs an operating 
system, such as Windows NT, and other software components that are running within the 
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infrastrueture software that supports global ATM applications. Different types of activities 
occur at the ATM, one of the most critical of which is customer transaction session type 
activity. At different times, there are other types of activities that go on at the ATM, such as 
administration of the ATM when it is necessary to perform a settlement between the ATM 
5 and the host for the transactions that have occurred since the last time a settlement was 
performed. 

Also, between the ATM and system management, there are activities to control the 
ATM by the system management, such as stopping or rebooting the ATM remotely. There 
are other kinds of ATM maintenance types of activity which have to be supported from time 

10 to time when there is a hardware problem, and there are other kinds of hardware or device 
related activity, for example, in which a field service engineer must go to a particular ATM 
for a diagnostics type of session. It is inevitable that a collision can occur between these 
activities in terms of contention for resources or that could affect the integrity, for example, 
of a customer transaction while it is progress, in the absence of some kind of coordination of 

15 such activities. 

Typically, a financial institution, such as a bank, develops its own proprietary ATM 
hardware and software, in addition to ATM hardware and software which it may purchase 
from a variety of ATM vendors. Implementation of systems from other makers can be 
difficuh because, for example, of difficulty in interfacing and reusing present application 

20 resources. ATMs contain special devices, such as cash dispensers, card readers, and printers, 
which require a specialized interface for control from applications. Previously, hardware 
makers' interfaces were proprietary, and the Windows Open Services Architecture 
Extensions for Financial Services (WOSA/XFS) were developed to define a standard for 
application control of specialized ATM peripherals. 

25 ATM machines include computer applications or software running on computer 

hardware within the ATM machine which, for example, displays on the ATM touch screen 
and interfaces with a host computer and other remote computers connected to the ATM over 
a network. Before an ATM machine is deployed, the software must be installed on the 
processor or computer hardware of the ATM machine, and from time to time, it may be 

30 necessary to upgrade the software on the ATM machine. 

Currently, when an ATM machine is to be deployed, for example, by a financial 
institution, such as a bank, it is necessary for the financial institution to send a technical 
representative to perform a local installation of the software on the ATM machine. It may 
likewise be necessary for the financial institution to send a technical representative to 
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perform a local upgrade of the software on the ATM machine from time to time. ATM 
machines are typically located, for example, at local branches of the financial institution, 
which may require the technical representative to travel a considerable distance. Thus, there 
is a substantial cost to the financial institution in terms, for example, of the time and travel 
5 expense associated with locally installing and/or upgrading software releases on the ATM 
machines. 

The financial institution, such as the bank, which has a global ATM product, requires 
software that runs on the ATMs that is designed to run in a global environment throughout 
the world and across many different hardware vendors. In that situation, the financial 

10 institution also wants to have one common release of the software for the product. However, 
in order to have a common software release for each particular financial terminal on which 
the product is loaded, each financial terminal must be tailored with specific information that 
is peculiar to it, and putting that site specific information on the terminal is problematic. 

Presently, use of an ATM by a customer of the financial institution, such as the bank, 

1 5 presents a tremendous challenge to the customer who happens to be partially sighted and a 
virtually impossible task for the customer who happens to be totally non-sighted. Typically, 
when a customer goes to an ATM to perform a financial transaction, such as deposit, 
withdraw, or transfer funds, the customer communicates with the bank's ATM system via a 
touch screen and perhaps a keypad at the ATM. Currently, many ATMs which are intended 

20 to support visually impaired people do not have an audio circuit. Such ATMs use touch 

screens, and the access for a visually impaired person is to approach the ATM and touch the 
touch screen to begin an ATM session and to enter his or her personal identification number. 
While some of these ATMs use different fonts on the touch screen, for example, for partially 
sighted persons, such ATMs are of no benefit to totally non-sighted persons. 

25 In some currently available ATM's for visually impaired persons, the navigation is in 

a large area of the screen, such as quadrants or quarters of the screen, on the principle that 
even a totally unsighted person should be able to fairly accurately touch a quarter of the 
screen without being any more precise than that in order to make a selection. For example, if 
the visually impaired person is entering information, such as a nxraiber in order to withdraw 

30 money, the visually impaired person enters a number by touching the touch screen a certain 
number of times, such as two times for the number two or three times for the number three. 
A limited number of ATMs intended to support visually impaired persons currently provide 
audio feedback, such as a scripted audio functionality via a built-in loudspeaker to 
supplement the touchscreen/keypad interface for visually impaired persons. However, such 
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ATMs have not provided a particularly satisfactory solution for visually impaired persons, for 
example, because the scripted prompts are audible to passers-by, which compromises both 
the privacy and the security of the visually impaired person's ATM transaction. 

5 Summary of the Invention 

It is a feature and advantage of the present invention to provide a method and system 
of centralized system management of ATMs, local and remote administration of the ATMs 
for operators and field service personnel, and for delivering world wide web content to ATM 
customers 

10 It is a further feature and advantage of the present invention to provide a method and 

system of centralized system management and local and remote administration of ATMs 
which are web-enabled. 

It is another further feature and advantage of the present invention to provide a 
method and system of centralized system management and local and remote administration of 
15 ATMs in which ATM communications are performed over a communications network. 

It is a further feature and advantage of the present invention to provide a system and 
method for use of an ATM by both partially sighted and non-sighted visually impaired 
persons. 

It is another feature and advantage of the present invention to provide a system and 
20 method for use of an ATM by a visually impaired person which incorporates screen reader 
technology to read text presented on the touch screen and convert the text to audio form for a 
visually impaired person. 

It is still another feature and advantage of the present invention to provide a system 
and method for use of an ATM by a visually impaired person which diverts audio to a 
25 headphone jack to enable the visually impaired person to hear the converted screen 
information in privacy. 

It is an additional feature and advantage of the present invention to provide a system 
and method for use of an ATM by a visually impaired person which utilizes a standard format 
and screen reader software to enable the unsighted person to easily navigate through an ATM 
30 session. 

To achieve the stated and other features, advantages and objects, an embodiment of 
the present invention provides a method and system for providing global self-service 
transaction terminals (ATMs) that affords worldwide web content to self-service ATM 
customers, centralized management for ATM operators, and supports local and remote 
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administration for ATM field service personnel. The system includes multiple self-service 
ATMs coupled over a network to a host, and the ATM terminals are provided with a touch 
screen interface and an interface for visually impaired persons. The terminals enable both 
local and remote administration of terminal operations by bank personnel. 
5 The terminals for an embodiment of the present invention are web-enabled, and 

terminal communications are performed over a communications network. The operations 
software for the global ATM for an embodiment of the present invention is buih on self- 
service architecture, referred to herein as NTDS, in cooperation with Windows Open Systems 
Architecture/Extensions for Financial Services (WOSA/XFS) software. 

10 In an operational aspect of an embodiment of the present invention, a startup request 

is received by a process controller of a transaction terminal to start one or more transaction 
terminal processes, such as a system monitor, an audio application for visually impaired 
customers, a screen reader application for visually impaired customers, a session manager, a 
device manager, a system manager, a diagnostics application, an intelligent maintenance 

15 panel, a log manager, an installation framework, and/or a configuration framework. The 

process controller starts the requested process, and the process that is started up performs one 
or more pre-defined transaction terminal ftmctions. If a shutdown command is received, the 
process controller also coordinates an orderly shutdown of the transaction terminal. 

The startup request can be received by the process controller from either an integrated 

20 network control over a network (to which a number of other transaction terminals are also 
coupled) or an operator interface touchpoint, such as a front screen of the transaction 
terminal, a personal computer on a network, a video screen, or a personal data assistant. In 
addition to starting one or more processes, for each started process, the process controller also 
monitors the process, restarts the process if necessary, reboots the transaction terminal system 

25 if necessary, and maintains a registry of the started process. 

If the process that is started up is the system monitor, the system monitor performs 
one of more system monitor functions, including blanking a screen display, unblanking the 
screen display, resetting a hardware watchdog timer, resetting a hardware watchdog timeout 
value, or sending a system reset notification to an integrated network control. If the started 

30 up process is the audio application, the audio application performs one or more audio 
application functions consisting of controlling routing of an audio amplifier output or 
controlling an audio amplifier board, diagnostic testing of the amplifier board. If the process 
that the process controller starts up is the screen reader application, the screen reader 
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application performs one or more screen reader functions, including converting text-to- 
speech or providing a screen layout with navigation selections exclusively by touchscreen. 

If the process controller starts up the session manager, the session manager can 
perform one or more session manager functions consisting of bringing up a browser, 
5 coordinating a customer session, an operator session, and/or a hardware diagnostics session, 
supporting a transaction terminal start function and/or a transaction terminal stop function, 
displaying an out-of-service transaction terminal screen, recovering from an out-of-service 
condition of the transaction terminal, reporting pre-selected transaction terminal status 
information, reporting one of an out-of-service and a back-in-service condition of the 

1 0 transaction terminal, and/or reporting a state of the transaction terminal as one of in use, idle, 
diagnostics running, and back administration utility running. 

If the process started by the process controller is the device manager, the device 
manager may perform one or more device manager functions, including coordinating and 
allocating a cash dispensing module, a depositor, a dynamic reader, a touchscreen, a printer, a 

15 switch, and/or an indicator. If the process controller starts up the system manager, the system 
manager can perform one or more system manager functions consisting of transaction 
terminal status monitoring, inquiry and control commands, file transfer and remote command 
execution, software distribution, remote peruse, log upload, auto configuration, load 
balancing support, device MIS, customer MIS, or time synchronization. 

20 If the process controller starts up the diagnostics application, the diagnostics 

application may perform one or more diagnostics application functions including diagnostics 
requests, communicating with a physical device handler, diagnostic testing of a peripheral 
device, or providing a list of devices to a client. If the process started by the process 
controller is the intelligent maintenance panel, the intelligent maintenance panel may perform 

25 one of more intelligent maintenance panel functions including obtaining status of one of a 
session and a device, performing a shutdown and/or a reboot through an operator request, 
performing an operator interface log on via an operator selection, allowing a service mode 
entry, or requesting a diagnostic test. 

If the process started up by the process controller is the log manager, the log manager 

30 can perform one or more log manager functions consisting of maintaining a business log or 
maintaining a runtime log. If the started up process is the installation framework, the 
installation framework may perform one or more installation framework ftmctions consisting 
of distribution of software release packages, activation of software release packages, cutover 
of software release packages, fallback to a previously running version of software, backing 
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out of a last distributed software release package or reinstalling a previous software versions. 
If the process started by the process controller is the configuration framework, the 
configuration framework may perform one or more configuration ftamework ftinctions 
including installing and configuring software or configuring the transaction terminal. 
5 Additional objects, advantages and novel features of the invention will be set forth in 

part in the description which follows, and in part will become more apparent to those skilled 
in the art upon examination of the following, or may be learned by practice of the invention. 

Brief Description of the Drawings 

10 Fig. 1 is a schematic diagram with illustrates a high level overview of the software 

architecture of the Global CAT for an embodiment of the present invention; 

Fig. 2 is a table which shows examples of significant components of the global ATM 
architecture for an embodiment of the present invention; 

Fig. 3 is a table which shows examples of the major functionality of process control 
1 5 for an embodiment of the present invention; 

Fig. 4 is a schematic diagram which illustrates an example of the scope and control of 
processes and service brought up by the process controller for an embodiment of the present 
invention; 

Fig. 5 is a table which shows examples of operator commands that include Start Cat 
20 and Stop Cat for an embodiment of the present invention; 

Fig. 6 is a table with shows examples of the major ftinctionality of the system monitor 
for an embodiment of the present invention; 

Fig. 7 is a table which shows examples of the major ftinctionality of VIP headphones 
for an embodiment of the present invention; 
25 Fig. 8 is a schematic flow chart with illustrates an example outline of the interfaces in 

a VIP aspect of an embodiment of the present invention; 

Fig. 9 is a table which shows examples of the major ftinctionality of VIP screen reader 
for an embodiment of the present invention; 

Fig. 10 is a schematic diagram which illustrates an example of a VIP screen layout for 
30 an embodiment of the present invention; 

Fig. 1 1 is a schematic diagram which shows an example overview of VIP Global 
CAT screen presentation interfaces for an embodiment of the present invention; 

Fig. 12 is a schematic flow chart which illustrates an example of the process of 
navigating to a VIP screen choice for an embodiment of the present invention; 
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Fig. 13 is a schematic flow chart which illustrates an example of the process of 
selecting a VIP screen choice for an embodiment of the present invention; 

Fig. 14 is a table which shows examples of major operator functionalities of the 
operator interface (01) for an embodiment of the present invention; 
5 Fig. 15 is a schematic diagram which illustrates an overview example of the ATM 

components for an embodiment of the present invention while the ATM is in operator 
session; 

Fig. 16 is a table which shows examples of significant functionality of the ASM for an 
embodiment of the present invention; 
10 Fig. 1 7 is a table which summarizes examples of the relationships between the ASM 

and its collaborators for an embodiment of the present invention; 

Fig. 18 is a table which shows examples of devices for which device services are 
provided through service providers for an embodiment of the present invention; 

Fig. 19 is a table which illustrates examples of the major functionality of system 
1 5 management for an embodiment of the present invention; 

Fig. 20 is a table which illustrates examples of devices on the ATM for which INC is 
configured to support for an embodiment of the present invention; 

Fig. 21 is a table which shows examples of significant functionality of diagnostics for 
an embodiment of the present invention; 
20 Fig. 22 is a table which shows examples of significant functionality of the intelligent 

maintenance panel (IMP) for an embodiment of the present invention; 

Fig. 23 is a table which shows examples of session states for an embodiment of the 
present invention; 

Fig. 24 is a schematic diagram which illustrates examples of the diagnostic 
25 components and their interactions with their collaborators for an embodiment of the present 
invention; 

Fig. 25 is a table which illustrates examples of the primary functionality of logging 36 
for an embodiment of the present invention; 

Fig. 26 is a table which shows examples of the major functionality for installation and 
30 fallback for an embodiment of the present invention; and 

Fig. 27 is a table which illustrates the primary functionality of configuration 40 for an 
embodiment of the present invention. 
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Detailed Description 

Referring now in detail to an embodiment of the present invention, one or more 
examples of which are illustrated in the accompanying drawings, an embodiment of the 
5 present invention provides a method and system for providing global self-service transaction 
terminals or automatic teller machines (ATMs) that affords worldwide web content to ATM 
customers, centralized management for ATM operators, and supports local and remote 
administration for ATM field service personnel. The system includes multiple ATMs 
coupled over a network to a host, and the ATMs are provided with a touch screen interface 

1 0 and an interface for visually impaired persons. The ATMs enable both local and remote 
administration of ATM operations by bank personnel. The ATMs are web-enabled, and 
ATM communications are performed over a communications network. 

"CAT" is an acronym used by a particular financial institution for its ATMs, which 
are known as customer activated terminals. The CAT is the latest generation of an ATM for 

15 the particular financial institution worldwide. "CAT" is also an acronym for the set of 

software that runs on ATMs operated by the particular financial institution. "Global CAT" is 
a collection of software that can reside on a CAT or any other brand of ATM which is to be 
deployed worldwide. In the worldwide deployment of ATMs, each region supports its own 
languages and business rules, so the Global CAT supports multiple languages and country- 

20 specific business rules. 

In an embodiment of the present invention, the Global CAT allows a customer to 
perform certain banking transactions, such as transfers of money between accounts, a balance 
inquiry to find out the balance on individual accounts, cash withdrawals to get money out of 
the machine, and deposits by placing either checks or cash into envelopes and putting them 

25 into the machine via a depositor, which is a component piece of equipment on the CAT. In 
order to use the Global CAT, the customer approaches the CAT with a transaction card issued 
by the bank and dips or swipes the card into a card reader of the CAT. The card reader reads 
the card and recognizes the customer. Software on the processor of the CAT executes certain 
code, which is sent out over a network to a host computer that contains the account 

30 information of the person, and the host verifies the customer's personal identification number 
(PIN). 

In an embodiment of the present invention, when the customer dips or swipes his or 
her card, a "Hello" or "Welcome" screen is displayed on a video monitor by the Global CAT, 
and he or she enters the PIN in response to prompts on the screen. That information is sent 
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off as a message to the host for verification that it is indeed the PIN of the person who has 
dipped the card, and the host retrieves a certain account information for the person. At that 
point, certain screens are presented to the customer on the video monitor of the CAT for the 
customer to navigate through different choices. The interface for the customer at the Global 
5 CAT is known as a touch screen, and the customer interfaces with the Global CAT by 

touching an area on the video monitor of the Global CAT. The customer's touch is read and 
then translated into a choice displayed on the screen. The choices displayed on the screen 
include choices, such as "Do you want to do transfer?", "Balance inquiry", "Withdrawal", or 
"Deposit". 

10 In an embodiment of the present invention, the customer who wishes to make a 

withdrawal presses an area on the screen that is a rectangle with the word "Withdrawal" on it. 
That leads to another screen displayed on the video monitor asking, for example, "From what 
account?", and thereafter, "What amount?". Thus, the customer continues to read the screens 
and touch different areas on the video monitor to accomplish what the customer wants to do. 

1 5 For example, if the customer wishes to withdraw cash, cash is dispensed out of a mechanism 
of the CAT called a cash dispensing mechanism. Following a withdrawal, the customer 
removes the cash and ends the CAT session by indicating to the CAT that the customer is 
finished by exiting. Another choice which can be offered to the customer at the Global CAT, 
for example, is to make a purchase at the Global CAT, such as purchasing airline tickets or 

20 stamps. The customer uses the same mechanism of dipping his or her card and entering his 
or her PIN. The customer's identification is authenticated via the host, and the customer is 
then presented a set of screens that allows the customer to navigate for such fiinctionality. 

In a visually impaired person (VIP) aspect of the Global CAT for an embodiment of 
the present invention, the Global CAT supports both sighted people and non-sighted people. 

25 The VIP Global CAT has special provisions to support visually impaired persons in a totally 
non-sighted category, as well as a partially sighted category. The VIP Global CAT is 
conveniently located in various places for use by a visually impaired customer, such as in 
bank branches, grocery stores, or department stores. A larger font on the touch screen to 
make it easier for partially sighted persons to see. In addition, the VIP Global CAT makes 

30 use of screen reader technology that reads text presented on the touch screen and converts the 
text to audio form for the visually impaired person. Further, special hardware and software in 
the VIP Global CAT diverts the audio to a headphone jack for visually impaired customers. 
Also, the VIP Global CAT includes a standard touch screen format that allows visually 
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impaired customers to easily navigate through a session at the CAT and receive audio 
instruction feedback through the headphone jack. 

The VIP Global CAT for an embodiment of the present invention includes, for 
example, specific fiinctionality within the VIP Global CAT to accommodate both partially 
5 sighted and non-sighted persons. For partially sighted persons, the VIP Global CAT makes 
provisions, such as use of large fonts, and certain aspects of the screen are larger than they 
are for sighted persons to make it easier for partially sighted persons to see. The VIP Global 
CAT also incorporates the screen reader technology, such that when the text that a fiilly 
sighted person sees is presented on the screen, the screen reader software reads the text and 

1 0 converts the text to audio form for the visually impaired person. The VIP Global CAT makes 
use of special hardware and software to allow the audio to be diverted to a headphone jack. 

Thus, a non-sighted customer approaches the VIP Global CAT for an embodhnent of 
the present invention in a similar way as a sighted customer, except the non-sighted customer 
is provided with a headphone. The non-sighted customer inserts a headphone jack into a 

1 5 socket for the headphone, and all of the screen information is translated into audio for the 
non-sighted customer. Thus, the non-sighted customer is able to hear the translated screen 
information through the headphone, along with instructions that are given to the non-sighted 
customer on how to navigate. It is an important aspect of the VIP Global CAT to eliminate 
the audio sound that is audible for anyone nearby to eavesdrop on the visually impaired 

20 customer's session at the CAT and thus to provide a more secure system for visually 
impaired customers. 

In an embodiment of the present invention, a non-sighted person enters information at 
the VIP Global CAT in a way that is similar to the way in which a sighted person enters 
information, in the sense that the interface is with the touch screen that covers the surface 
25 area of the monitor. Both sighted and non-sighted persons enter information by touching the 
screen in certain zones. However, the zones on the touch screen are laid out somewhat 
differently for a non-sighted person than for a sighted person. A standard format is used to 
allow the non-sighted person to navigate to a next screen or previous screen or to exit. Each 
time the non-sighted person makes a selection, the screen reader software gives the non- 
30 sighted person audio instructions. Thus, the non-sighted person is able to navigate through a 
session at the VIP Global CAT by touching the touch screen and receiving feedback through 
the audio instructions. 

The Global CAT for an embodiment of the present invention has, for example, two 
different clients, one of which is the bank customer and the other of which is the bank's 
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personnel. The bank's personnel must perform certain operations on the Global CAT, 
referred to as back administration, such as proofing or verifying and balancing the cash in the 
CAT against what the CAT processor believes should be in the machine and cash 
replenishment as the CAT dispenses cash from time to time. Another operation performed by 
5 the bank's personnel is a diagnostic function. If there is a malfunction at the Global CAT, 
software on the Global CAT can be executed by the bank's personnel to diagnose the 
hardware and let them know whether there is a problem, for example, with the cash 
dispensing mechanism, the depositor mechanism, or any of the other hardware on the 
machine. 

1 0 Another operation that is performed in connection with the Global CAT for an 

embodiment of the present invention is called remote administration. The Global CAT is part 
of a network of CATs within a region for which there is a single point of administration 
performed remotely by a machine referred to as an integrated network control (INC). The 
INC can communicate with hundreds or thousands of the Global CATs and includes features, 

15 such as log retrieval for auditing purposes. In addition each Global CAT stores transactional 
information, and periodically, the INC uploads these files and performs a reconciliation. 
Further, software is distributed from the central point of the INC and downloaded at the 
Global CATs from time to time to upgrade the software or to add new functionality in the 
CAT software. 

20 The Global CAT software for an embodiment of the present invention is built around 

the software referred to as NTDS, also known as self-service architecture. The NTDS 
software provides the basic inftastmcture for the internal Global CAT software, such as 
process and session control, logging, and the software functionality that is needed, for 
example, to communicate with devices to display the screens and to operate the cash 

25 dispensing mechanism as well as the other hardware of the Global CAT. The inside software 
which runs on the Global CAT processor also makes use of Windows Open Systems 
Architecture/Extensions for Financial Services software (WOSA/XFS), which is a standard 
or model that is used to control ATM devices, to control specific financial devices, such as 
cash dispensing mechanisms of the Global CAT. The Global CAT makes use of additional 

30 software, such as a device manager, which is a component of the Global CAT architecture 
that is used to coordinate and allocate the Global CAT devices. Another feature of the inside 
software for the Global CAT is referred to as the WOSA/XFS device wrapper, which is used 
to interface the NTDS system with the WOSA/XFS system. 
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The Global CAT architecture for an embodiment of the present invention includes 
local administration, which relates to operator interface and makes use of software running on 
the Global CAT processor into which the bank's personnel can log, using identification and 
authentication, such as a password and a name, to perform different types of operations. 
5 These operations include, for example, the back administration, such as replenishment of 
cash. The Global CAT architecture also includes remote administration, which makes use of 
software running on the Global CAT processor for what is referred to as systems 
management that communicates with an external aspect of the system which is the INC. The 
Global CAT architecture also includes software installation and configuration, which relates 

10 to software that is used to install the software and then to configure both the software and the 
hardware to run the Global CAT. Other components of the Global CAT architecture include, 
for example, diagnostics and an ATM session manager that is used to coordinate the sessions, 
for example, for a customer as screens are presented to the bank customer. For example, the 
ATM session manager actually coordinates the presentation by the operator interface of a set 

1 5 of screens interfacing to the bank' s personnel . 

The software architecture for the Global CAT for an embodiment of the present 
invention includes a number of software components which can be presented in a layered 
approach for a top down understanding of the architecture, including an overall view of all of 
the software components at a high level and a reduction on a major functionality basis. Fig. 1 

20 is a schematic diagram with illustrates a high level overview of the software architecture of 
the Global CAT for an embodiment of the present invention. Referring to Fig. 1, the typical 
three-layered approach includes, for example, applications 10, infrastructure 12, and 
operating system 14, each of which contains high level functionality for that particular layer. 
Operations software for the global ATMs for an embodiment of the present invention 

25 is built on self-service architecture referred to herein as NTDS in cooperation with Windows 
Open Systems Architecture/Extensions for Financial Services (WOSA/XFS) software. Fig. 2 
is a table which shows examples of significant components of the global ATM architecture 
for an embodiment of the present invention. Referring to Fig. 2, these components include, 
for example, process control 16, system monitor 18, visually impaired person (VIP) 

30 headphones 20, VIP screen reader 22, operator interface 24, ATM session manager 26, 

devices 28, system management 30, diagnostics 32, intelligent maintenance panel 34, logging 
36, installation and fallback 38, and configuration 40. 

Fig. 3 is a table which shows examples of the major fiinctionality of process control 
16 for an embodiment of the present invention. Referring to Fig. 3, significant ftmctionality 
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of process control 16 includes, for example, starting and monitoring platform processes and 
services 42, restarting processes or rebooting the system 44, coordinating an orderly 
shutdown 46 in most cases, maintaining a registry of processes started 48, and serving as the 
root of most system management commands 50. Startup can be automatic via NT service 
5 control or manual via NTDS operator utility. The Global CAT is started via "net start" in a 
startup.bat file. Shutdown occurs on systems management shutdown or reboot commands. 
Shutdown can be manual via NTDS operator utility or via an NT "net stop" command. 

Inter process communications (IPC) for process control 16 utilizes a component 
object model (COM) interface to all NTDS components. Process control interfaces include, 

1 0 for example [default] IComponentRegistrar, IComponentldentification, ImanagedComponent, 
IManagedComponent2, IProcessLifecycle, lEventRegistration, lObjectDirectory. The ATM 
Session Manager (ASM) is dependent on IIS. The process controller 16 must start IIS before 
the NTDS processes. The process controller 16 is a COM local server. It is an NT process 
housing a single COM object running in an single threaded apartment (STA). Accesses to the 

1 5 interfaces are serialized through the STA with the exception of re-entry when there is an 

outstanding object linking and embedding (OLE) call to other NTDS COM processes. Fig. 4 
is a schematic diagram which illustrates an example of the scope and control of processes and 
service brought up by the process controller 16 for an embodiment of the present invention. 
In an embodiment of the present invention. Start Cat and Stop Cat commands put the 

20 CAT into particular states. These commands can be initiated from the INC, the operator 
interface (OI) 24, or the intelligent maintenance panel (IMP) 34. Fig. 5 is a table which 
shows examples of operator commands that include Start Cat 52 and Stop Cat 54 for an 
embodiment of the present invention. The possible initiators and semantics of each operation 
are noted. 

25 In the Global CAT architecture for an embodiment of the present invention, the ATM 

Session Manager (ASM) 26 is the controlling entity for allocating and determining which 
type of session to run as well as handling the state of the CAT, managing an out of service 
screen (OOSS), and notifying the INC of changes in CAT status. For this reason the process 
controller 16 is designed to process the Stop and Start commands specifically addressing the 

30 Global CAT architecture instead of generically propagating the commands. The process 
controller 16 uses an lATMSessionManager interface supported by the ASM 26 using 
StopATMSession(stopmode) and StartATMSession(startmode) methods. 

In a embodiment of the present invention, the initiators, such as IMP 34, OI 24, and 
INC are adapted to use an Execute method implemented by the process controller 16 on a 



14 



Express Mail Certificate No. EL 507 837 327US 



IManagedComponentl interface and pass the appropriate mode. In order to support both the 
Start Cat 52/Stop Cat 54 and diagnostic operations, an interface is defined to support the 
loading and unloading of devices. This interface, referred to as IDevicesLifecycle, has a load 
and unload method. On the "StopATMSession (stopmode)," the ASM 26 puts up the out of 
5 service screen, stops the customer session as is appropriate, sends the CAT status to the INC, 
and notifies the device manager to unload its devices 28. On the "StartATMSession 
(startmode)," the ASM 26 notifies the device manager to load its devices 26, starts the 
customer session which puts up the "Hello" screen, and notifies the INC. 

Fig. 6 is a table with shows examples of the major functionality of the system monitor 

10 for an embodiment of the present invention. Referring to Fig. 6, significant functionality of 
the system monitor 18 includes, for example, blanking and unblanking a front screen display 
during system shutdown and startup 56, resetting a hardware watchdog timer periodically 58, 
resetting the hardware watchdog timeout value for system operation and reboot 60, and 
sending notification to INC when the system has been reset due to the watchdog timer 

1 5 (WDT) 62. The system monitor 1 8 is one of the first processes started, since it must start 

resetting the hardware watchdog timer in order to prevent the timeout from expiring while the 
system is starting up. The system monitor 18 remains up until a system shutdown (reboot) is 
issued. 

For inter process communications (IPC), the system monitor 18 uses a COM interface 
20 to communicate with systems management 30. The ASM 26 uses a COM interface to notify 
the system monitor 1 8 when to unblank and blank the video display of the CAT. The system 
monitor 18 uses lOCTL calls, defined in a video blanking and driver functional specification 
as the communication with the kernel driver (vbat.sys) that interfaces to the video blanking 
and timer device. For external communications, Transmission Control Protocol/Internet 
25 Protocol (TCP/IP) is used for sending a notification message to the INC, via a systems 

management status instrument, when the system monitor 18 detects that the system had been 
reset due to the expiration of the hardware watchdog timer. 

The system monitor 18 for an embodiment of the present invention is designed to 
come up using the NTDS process startup model. The system monitor 1 8 interfaces with 
30 systems management 30 to send a notification to the INC if it detects that the system has been 
reset due to expiration of the hardware watchdog timeout. The notification cannot be sent to 
systems management 30 until a StartProcess has been executed. The ASM 26 interfaces with 
the system monitor 18 to control the video blanking and unblanking via a system monitor 
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interface. When a SHUTDOWN is executed, the video is blanked and the hardware 
watchdog timeout is set to a configured value, such as 5 minutes. 

In an embodiment of the present invention, the system monitor 18 depends on the 
systems management component 30 being up and operational to send a notification to the 
5 INC if it detects that the system has been restarted due to the hardware watchdog timeout 
expiring. The system monitor 18 cannot send the notification to systems management 30 
until a StartProcess has been executed. The system monitor 18 depends on the ASM 26 
sending a notification that the video can be unblanked. The system monitor 18 depends on 
the process controller 16 sending a SHUTDOWN notification in order to blank the video and 
10 reset the hardware watchdog timeout value. The system monitor 18 depends on the kernel 
driver (vbat.sys) that provides the interface to the hardware watchdog timer and video 
blanking device. 

Fig. 7 is a table which shows examples of the major functionality of VIP headphones 
for an embodiment of the present invention. Referring to Fig. 7, such major functionality 

1 5 includes, for example, the VIP application starting either by detection of headphone insertion 
or by double tap 64 in top right hand comer, depending on the configuration parameter, 
software control of audio amplifier output for routing to either speaker or headphone 66 via 
C0M8 port pins to provide more security during the VIP transaction, an audio amplifier 
board with software control 68 with the ability to detect the physical presence of the amplifier 

20 board, and diagnostics required for testing functionality of the amplifier board 70 involving 
headphone insertion to verify audio routing. A "Switches" COM object handles all software 
control of the amplifier board 

The VIP application 20 for an embodiment of the present invention accesses the 
"Switches" COM object. At initialization, the amplifier board is set to manual mode and the 

25 speaker is activated for audio output. A "headphone detected" event is generated to the 

"Hello" screen, and on the "headphone detected" event, the application 20 issues commands 
through the "Switches" object to route audio to the headphone. For timeout and/or end of 
session, the application 20 issues a command to route audio to the speaker for the next 
customer. 

30 The VIP Global CAT for an embodiment of the present invention makes use of a new 

audio amplifier board having software control of the amplifier board. Headphone insertion 
triggers the VIP application 20 from the "Hello" screen, and double touch triggering of the 
VIP application 20 is disabled. The VIP application 20 controls audio output, and audio is 
not routed to the speaker until a VIP session is complete or times out. Diagnostics 32 is 
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available for testing audio routing. Fig. 8 is a schematic flow chart with illustrates an 
example outline of the interfaces in a VIP aspect of an embodiment of the present invention. 

Fig. 9 is a table which shows examples of the major functionality of VIP screen reader 
22 for an embodiment of the present invention. Significant fiinctionality of the VIP screen 
5 reader 22 includes, for example, allowing visually impaired customers to perform all the 
transactions that sighted customers are able to do. This is done by providing a text-to-speech 
capability 72 and a screen layout and navigational method that allows visually impaired 
customers to sequence through screens and make selections 74 using only the touchscreen 
without using the keypad. 

10 Fig. 10 is a schematic diagram which illustrates an example of a VIP screen layout for 

an embodiment of the present invention. By touching the "NEXT" area 76 or the 
"PREVIOUS" area 78, customers can sequence through all the choices or information boxes 
80, 82, 84, 86 on the screen, one-at-a-time. As each item is reached, it is voiced. When the 
desired choice is heard, "SELECT" 88 is touched and the action is performed, which is 

1 5 typically a transition to a new screen. By constantly touching "NEXT" 76, all the items can 
be heard. When the bottom of the screen is reached, it wraps to the top. All items, whether 
choices or information, are defined as HTML anchors that are sequenced through by "NEXT" 
76 or "PREVIOUS" 78 and executed by "SELECT" 88. Touching the items directly will 
cause a BOOP. Items must be accessed via the navigation zones. 

20 Screen reader software for an embodiment of the present invention includes a number 

of aspects. A commercially available screen reader product, such as a JAWS executable, is 
started up by process controller 16 at system initialization. Permanently running but voicing 
is enabled only for the VIP application 22. Another aspect of the screen reader 22 is an OCX 
control that is the sole method for invoking voice. An additional aspect of the screen reader 

25 22 are JAWS Internet Explorer scripts including interpretive language that is used to control 
voicing and that are passed to JAWS by OCX, interpreted and executed by JAWS. A further 
aspect of the screen reader 22 is a JFWVid.dll kernel display driver that is part of the video 
driver chain, which is started up by Windows NT at system startup and runs permanently. It 
is used by JAWS to construct a text map of the entire display area when voicing is enabled. 

30 Still another aspect of the screen reader 22 are JAWS utilities which must be run if a new 
display type is installed on the system 

There are separate screens and a separate navigation shell for the VIP application 22 
for an embodiment of the present invention. The underlying application is the same as for 
sighted customers. The navigation shell, including "NEXT" 76, "PREVIOUS" 78, and 
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"SELECT" 88 communicates voicing commands to JAWS via an OLE custom control (OCX 
). The OCX methods used include, for example, EnableVoice which enables the voicing 
capability whenever the VIP application 22 is entered and turns on the screen layout 
construction by the video driver. Another OCX method includes DisableVoice which 
5 disables the voicing capability at initialization and end-of-session and turns off the screen 
layout construction by the video driver. Other OCX methods include, for example, SayString 
which voices the passed string argument and ReadCurrentOption which voices the field that 
currently has the focus in the browser. 

Fig. 11 is a schematic diagram which shows an example overview of VIP Global 

1 0 CAT screen presentation interfaces for an embodiment of the present invention. The VIP 
screens and normal sighted screens use different "device-specific template" files and phrase 
definitions but the underlying mini-app and "canonical template" files are the same. The 
JAWS kernel display driver is inserted into the video driver chain and maintains an image of 
display memory for use by the JAWS executable when voicing. Fig. 12 is a schematic flow 

1 5 chart which illustrates an example of the process of navigating to a VIP screen choice for an 
embodiment of the present invention. Fig. 13 is a schematic flow chart which illustrates an 
example of the process of selecting a VIP screen choice for an embodiment of the present 
invention. The method for entering a PIN by the visually impaired customer is a special case, 
such as tap mode, which is necessary for security reasons. 

20 Fig. 14 is a table which shows examples of major operator functionalities of the 

operator interface (OI) 24 for an embodiment of the present invention. Referring to Fig. 14, 
significant operator interface functionality includes orderly shut down or reboot system 90, 
start ATM 92, stop ATM 94, Stop ATM immediate 96, view status of ATM 98, view 
activity/MIS log 100, view NT event logs 102, view software release information 104, and 

25 configure ATM 106. Additional major fanctionality of the OI 24 includes view ATM 

configuration 108, view TTM status 110, load keys 1 12, start back administration 1 14, start 
diagnostics 116, start command shell 118, and user account administration 120. The 01 
navigation shell is an integral part of the 01 24, and is responsible for logging on users, 
supporting user entitlements, providing high-level menu selections and navigation, with 

30 multi-lingual support, and launch OI dialog/applet selected by the user. 

Fig. 15 is a schematic diagram which illustrates an overview example of the ATM 
components for an embodiment of the present invention while the ATM is in operator 
session. One session bubble is configured for the operator session. The OI session bubble is 
recreated after each time the user exits OI 24. An OI session is available until the system is 
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shut down. Session components "warm-started" in the 01 session bubble include, for 
example, DeliveryCapability, RuleBroker, PresentationManager, LanguageMan, 
ApplicationManager, and 01. The OI shell and all 01 dialogs/applets support the 
ISessionComponentLifecycle2 interface. 
5 The OI 24 for an embodiment of the present invention supports some or all of a 

number of touch points, such as a front screen, client personal computer (PC) on a local 
network, a video terminal, such as VTIOO, personal digital assistants (PDAs), and a dual 
monitor. A full set of OI dialogs/applets is implemented once which run on all different 
touch points. Interfaces implemented by all 01 dialogs/applets include, for example, 

1 0 ISessionComponentLifecycle2, Icomponentldentification, Istreamin, and IDialog2. 

Interfaces implemented by OI shell include, for example, ISessionComponentLifecycle2, 

icomponentldentification 

Istreamin, and ApplicationListener. 

The OI shell for an embodiment of the present invention depends on NTDS 

15 components, such as ApplicationManager, Collection, ComponentFactory, 

ComponentRegistrar, Configuration, DeliveryCapability, LanguageMan, Language, Logger, 
ObjectDirectory, PathRegistry, PresentationManager, ScreenObject, Session, and 
TemplateStream. OI dialogs/applets depend on some or all NTDS components, including 
Collection, ComponentFactory, ComponentRegistrar, BackDoor, LanguageMan, Language, 

20 Logger, PathRegistry, ScreenObject, and TemplateStream 

To accomplish certain functions, the OI Shell and OI dialogs often collaborate with other 
NTDS components. 

Security measures for the 01 24 for an embodiment of the present invention include, 
for example, user log on validated by NT, user account administration dialog providing local 

25 administration of user accounts, update of user passwords from INC, inactivity timeout in the 
OI shell and all OI dialogs, IIS configured to allow restricted remote access from a client PC 
on a local network, secure communication link between an ATM and a client PC via secure 
sockets layer (SSL), authenticating a client with a digital certificate, and configuring a client 
PC to be CISO security compliant 

30 The ASM 26 for an embodiment of the present invention is a NTDS component that 

provides various functionality on Global CAT applications. Fig. 16 is a table which shows 
examples of significant functionality of the ASM 26 for an embodiment of the present 
invention. Referring to Fig. 16, the major functionality of the ASM 26 mcludes, for example, 
bringing up a browser in full-screen mode 122, coordinating starting and re-starting of 
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customer sessions 124, coordinating starting of an operator session at the fi-ont screen 126, 
coordinating entering into and exiting out of hardware diagnostics initiated from the 
intelligent maintenance panel (IMP) 128, and supporting "Start/Stop/Stop immediate CAT" 
functions 130. 

5 Other major functionality of the ASM 26 for an embodiment of the present invention 

consists, for example, of displaying the out-of-service screen under various scenarios 132, 
which includes system startup and shutdown, a critical device failure, host is down, and the 
like. Additional functionality of the ASM 26 includes, for example, recovering from out-of- 
service by monitoring status of host connection, and status of devices and switches which 

1 0 impact the usability of the ATM by customers 1 34, reportmg various ATM status information 
when the system management agent or operator interface inquires the component 136, 
reporting when the ATM is out-of-service, and when it is back in service after having been 
out-of-service 138, and reporting the state of the ATM to indicate whether it is in use or idle, 
diagnostics is running, or back administration utility is running 140. 

1 5 The ASM 26 for an embodiment of the present invention is a generic component that 

can be used on all ATM platforms. However, there are differences across platforms with 
which the ASM 26 must deal. The ASM 26 is a process component brought up by the 
process controller 16. It stays around at all times until the system is shut down. The ASM 26 
brings up the web browser at initialization. It terminates the browser when the system is shut 

20 down. All inter-process and intra-process communication by the ASM 26 are COM based. 
The ASM 26 can be configured to manage some or all of the critical devices on all ATM 
platforms, such as card readers, cash dispensers, depositors, pin pads, printers, and switches. 
It is noted that a 'critical device' is one, which if its status is 'down', causes the ATM to be 
out-of-service. The ASM 26 supports bring-up of 01 sessions and diagnostics on all ATM 

25 platforms, in both front-service and rear-service configurations. 

Interfaces implemented by the ASM 26 for an embodiment of the present invention 
include, for example, Icomponentldentification, IprocessLifecycle, IManagedComponent2, 
lATMSessionManager, lEventNotification, and lEventRegistration. The ASM 26 uses 

NTDS components, such as BackDoorManager, ComponentFactory, ComponentRegistrar, 

30 DebugLogger, DeviceManager, EventLogger, EventNotifier, Instrument, 

InstrumentManager, PathRegistry, Session, and SessionController. To accomplish certain 
functions, the ASM 26 collaborates with other NTDS components. Fig. 17 is a table which 
summarizes examples of the relationships between the ASM 26 and its collaborators for an 
embodiment of the present invention. 
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ATM device services 28 for an embodiment of the present invention are provided 
through WOSA compHant XFS Service Providers for various devices. Fig. 18 is a table 
which shows examples of devices for which device services 28 are provided through service 
providers for an embodiment of the present invention. Such devices include, for example, 
5 cash dispensing modules 142, depositors 144, dynamic readers 146, secure touchscreens 148, 
printerslSO, and switches and indicators 152. These service providers are packaged as 
individual DLL's. A service provider is loaded when the device manager issues a WFSOpen 
for the device associated with that service provider. A service provider is unloaded when the 
device manager issues a WFSClose for the device 28 associated with that service provider. 

1 0 The service providers listed above are packaged as a DLL and an executable. STS service 
provider performs encryption key management and PIN encryption. 

Fig. 19 is a table which illustrates examples of the major fiinctionality of system 
management 30 for an embodiment of the present invention. Referring to Fig. 19, significant 
functionality of system management 30 includes status monitoring 154, inquiry and control 

1 5 commands 156, file transfer and remote command execution 1 5 8, software distribution 1 60, 
remote peruse 162, log upload 164, auto configuration 166, DNS load balancing support 168, 
device MIS 170, customer MIS 172, and time synchronization 174. 

The INC is configured to support a number of devices on the Global CAT for an 
embodiment of the present invention. Fig. 20 is a table which illustrates examples of devices 

20 on the ATM for which INC is configured to support for an embodiment of the present 

invention. System management 30 is started by the process controller 16 and remains active 
until the system is shutdown or rebooted. Inter process communications (IPC) are by COM 
and TTM, and external communications are by TCP/IP or X.25 to INC. Systems 
management 30 is platform independent. Platform dependent INC codes are supplied by the 

25 platform specific release. System management 30 implements, for example, IStatusMonitor 
(SMA), EqPADisplay, IprotocolTranslator (MPA), and ICommandDispatch (CDA). SKIP is 
used for encryption between the INC and the Global CAT, and arbitrary scripts can be 
downloaded and executed from the INC. 

Fig. 21 is a table which shows examples of significant functionality of diagnostics 32 

30 for an embodiment of the present invention. For example, diagnostics 32 executes 

diagnostics requests on behalf of a diagnostic client, such as the IMP controller using OLE 
automation 176. In addition, diagnostics 32 communicates directly with the physical device 
handlers (PDH) for all devices 178, activates PDHs at the beginning of a diagnostics session 
(Start Diag) 180, uses the PDH message interface to command and/or control devices 182, 
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and deactivates PDHs at the end of diagnostics session (End Diag) 184. Further, diagnostics 
32 performs various diagnostics tests on certain peripheral devices 186, and can determine 
and provide the specific device list to a client 188. 

The Diagserver 32 is started by the process controller 16 as a non-OLE component 
during the Global CAT startup. The order in which it is brought up in relation to the other 
components is not critical. The only requirement is that the Diagserver 32 should be 
available when a diagnostic client, such as ElvfP Controller, becomes available to the 
operator. The Diagserver 32 is terminated when the process controller 16 performs a 
shutdown. OLE automation is used between the Diagserver 32 and the Diagnostic client to 
make diagnostic requests and receive diagnostic test results. When a diagnostics client sends 
a request to the Diagserver 32 to start a diagnostics session, the physical device handlers 
(PDH) DLLs are loaded by the Diagserver 32. These DLLs provide a set of command and 
control APIs to the physical devices. 

Fig. 22 is a table which shows examples of significant functionality of the intelligent 
maintenance panel (IMP) 34 for an embodiment of the present invention. Referring to Fig. 
22, the major functionality of the IMP 34 is a result of IMP component areas, such as IMP 
controller executable (IC) 190 as a primary collaborator with NTDS components, IMP 
physical device handler (IMP PDH) 192 used only by IC and outside the XFS manager, and 
IMP device (IMP) 194 as internal firmware managing Startup/Shutdown status. Primary 
areas of functionality of the IC 190 include CAT status, command and/or control, and 
general. For CAT status, the IC 190 registers for events from the ASM to obtain session 
status. 

Fig. 23 is a table which shows examples of session states for an embodiment of the 
present invention. The IC 190 performs a front OI 24 logon via IMP operator selection and 
allows IMP service mode entry by selecting an "ENTER DIAG" button. For CAT 
maintenance, the IC 190 performs diagnostics by making requests to the Diagserver 32. In 
general, the IC 190 communicates directly with the IMP physical device handler (PDH) and 
performs various diagnostics tests using the Diagserver 32 on certain peripheral devices. Th< 
process controller 16 for an embodiment of the present invention, as an NTDS component 
during Global CAT startup, starts the IC 190. The IC 190 is terminated when the process 
controller 16 performs a shutdown. Fig. 24 is a schematic diagram which illustrates 
examples of the diagnostic components and their interactions with their collaborators for an 
embodiment of the present invention. 
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Fig. 25 is a table which illustrates examples of the primary functionality of logging 36 
for an embodiment of the present invention. The major functionality of logging 36 for the 
Global CAT is divided, for example, into business log 196 and runtime logs 198. The 
business log 196 records customer transactions for auditing and future investigation purposes. 
The transaction journal is viewed via the "Peruse" utility. Access to the Peruse utility is 
granted based on the user account entitlement. The runtime logs 198 include an extended 
logging mechanism or the XFS service providers to track detail debugging information. The 
logging manager 36 handles all the tasks required for proper filtering and routing of log 
messages. All runtime software logs through this manager. All kernel mode drivers and 
certain utilities use the native NT logging service facilities. 

Three interfaces provided to the logging manager 36 for an embodiment of the present 
invention include LogEvent, LogText and ClntAppLog. The ClntAppLog is maintained for 
backward compatibility. All new or modified software uses either LogEvent or LogText. 
Log messages are consolidated and formatted for viewing on a client. The logging manager 
36 is a dynamic link library (DLL) and is activated when the system is up. It is deactivated 
when the system is being shut down. The logging mechanism is generic across Global CAT 
platforms, ft is imperative to protect information contained in the customer transaction 
journal and runtime log files while those files are being uploaded from the CAT to the INC, 
and an end-to-end encryption (SKIP) mechanism is used for that purpose. 

Fig. 26 is a table which shows examples of the major functionality for installation and 
fallback 38 for an embodiment of the present invention. The major fiinctionality of 
installation and fallback 38 includes, for example, upgrading versions of software currently 
running on the Global CAT and falling back to previously running versions if the upgrade 
versions fail and local and remote distribution of software upgrades. Referring to Fig. 26, 
this fiinctionality involves distribution and release of software packages 200, activation of 
release packages 202, cutover of release packages 204, fallback to previously running 
versions of the software 206, backing out of the last distributed release package208, and 
reinstalling the previous software versions 210. 

Distribution of release packages 200 for an embodiment of the present invention 
involves distributing one or more sub-system releases in a release package to a hard disk to a 
fully fiinctional CAT. Activation of release packages 202 involves preparation for release 
cutovers and invoking generic installation scripts provided by each sub-system in the release 
package for the fully fiinctional CAT. Cutover to the release package 204 involves reboot of 
the CAT, invoking upgrade/configuration scripts provided by each sub-system in the release 
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package, and the CAT is ftilly functional after the software upgrade and configuration of the 
release package is complete 

Backing out the last distributed release package 208 for an embodiment of the present 
invention involves deactivating versions of the software in the latest release package so they 
5 are longer accessible or re-installable. Reinstalling previous software versions 210 involves 
carrying out activation and cutover steps for the previously running versions of the affected 
sub-systems, and the CAT is restored to the same state as just prior to introducing the release 
package. If an error occurs during cutover to one of the subsystem releases, the INC initiates 
a fallback to the previously running version of each affected subsystem in the correct fallback 
1 0 order. The framework, both executables and scripts, is invoked as a resuft of initiating a 
distribution of a release package, initiating an activation of a release package, initiating a 
cutover to a release package and reboot after an activation, and initiating a fallback. The 
framework becomes inactive once its current fimction completes, and stays inactive until 
invoked again. 

15 Inter process communications (IPC) communications in the installation and fallback 

framework 38 for an embodiment of the present invention includes one component, 
executable or script, invoking a second component and one component creating file content 
for a second component to read. TCP/IP is used between the INC and the CAT. The 
installation and fallback framework 38 relies on the NTDS system management and LCserver 

20 components to handle all communications with the INC. The software upgrade and fallback 
framework 38 is generic across Global CAT platforms. Local interface to the software 
upgrade framework 38 is via CATinstall.ksh. Remote interface to the software upgrade 
framework 38 is via INC and LCserver. 

Fig. 27 is a table which illustrates the primary functionality of configuration 40 for an 

25 embodiment of the present invention. A major functionality of configuration 40 is installing 
and configuring software 212 which involves, for example, running rif or.reg files to set up 
required registry entries, copymg kernel driver and other files to their required locations, and 
installing vendor drivers. Another major functionality of configuration is configuring the 
CAT to be operational 214 which involves, after configuration parameters such as IP and/or 

30 X 1 21 address for the CAT, router IP address, host IP or X 1 21 address, time zone, and the 
like have been entered, propagating these values to the registry locations where NT and 
vendor software expect them and updating CAT input files, such as nic.in, wipc.ini, hosts, 
and the like. 
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Configuration 40 for a embodiment of the present invention makes use of an OI 
interface for configuring the CAT. This interface has no manual configuration option. The 
parameters entered are, for example, Nodeid, IP address of the node, IP address of the router, 
and IP subnet mask. After these parameters are entered, the remaining configuration values 
5 come from the INC via oautoconfig (confboc.exe). 

The release is up with two sets of INC parameters, the production INC pair and the UAT test 
pair. The INC parameters that the CAT uses are determined from the login that is used to 
configure the CAT. If logged in as the 'field' login, the production pair is used . If logged in 
as the 'UATtest' login, the UATtest pair is used. Once the CAT has been configured, the 

10 nodeid parameter cannot be changed on a subsequent configuration of the CAT. Prefix tables 
and other customization files can be downloaded as part of the auto configuration. 

The configuration interface 40 for an embodiment of the present invention also 
provides, for example, an option for manual or auto configuration from the INC. For manual 
configuration, the option to select the host communication mode (X.25 or TCP/IP) is 

1 5 provided. The appropriate host parameters (IP or X.25) are prompted for and displayed based 
upon the host communication mode. The appropriate normalizer (nic.exe for X.25 and 
nitcp.exe for TCP/IP) is brought up. For manual configuration, the option to select the 
GATEWAY type (SF, or SFC) is provided, the appropriate GATEWAY configuration is run, 
and the appropriate GATEWAY executable is brought up. 

20 Various preferred embodiments of the invention have been described in ftilfiUment of 

the various objects of the invention. It should be recognized that these embodiments are 
merely illustrative of the principles of the present invention. Numerous modifications and 
adaptations thereof will be readily apparent to those skilled in the art without departing from 
the spirit and scope of the present invention. 

25 

What is claimed is: 
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1 . A method for providing worldwide web content, centralized management, and local 
and remote administration for a self-service transaction terminal, comprising: 

receiving a request for a startup of at least one transaction terminal process by a 
process controller of the transaction terminal selected from a group of transaction terminal 
processes consisting of a system monitor, an audio application, a screen reader application, a 
session manager, a device manager, a system manager, a diagnostics application, an 
intelligent maintenance panel, a log manager, an installation framework, and a configuration 
framework; 

starting the requested process by the process controller; 

performing at least one pre-defmed transaction terminal function by the started 
process; and 

if a command to shutdown is received, coordinating an orderly shutdown of the 
transaction terminal by the process controller. 

2. The method of claim 1 , wherein receiving the request further comprises receiving the 
request from one of an integrated network control and an operator interface. 

3 . The method of claim 2, wherein receiving the request further comprises receiving the 
request from the integrated network control over a network. 

4. The method of claim 3, wherein receiving the request further comprises receiving the 
request from the integrated network control coupled over the network to a plurality of self- 
service transaction terminals. 

5. The method of claim 2, wherein receiving the request further comprises receiving the 
request from an operator interface touchpoint consisting of one of a front screen of the 
transaction terminal, a personal computer on a network, a video screen, and a personal data 
assistant. 

6. The method of claim 1, wherein starting the requested process by the process 
controller f\irther comprises at least one of monitoring the process by the process controller, 
restarting the requested process by the process controller, rebooting a transaction terminal 
system by the process controller, and maintaining a registry of the started process by the 
process controller. 
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7. The method of claim 1, wherein the started process comprises the system monitor and 
wherein performing the pre-defined transaction terminal function further comprises 
performing a system monitor function selected fi-om a group of system monitor functions 
consisting of blanking a screen display, unblanking the screen display, resetting a hardware 

5 watchdog timer, resetting a hardware watchdog timeout value, and sending a system reset 
notification to an integrated network control. 

8. The method of claim 1, wherein the started process comprises the audio application 
and wherein performing the pre-defined transaction terminal flmction further comprises 
performing an audio application function selected fi-om a group of audio application flinctions 

1 0 consisting of controlling routing of an audio amplifier output, controlling an audio amplifier 
board, and diagnostic testing of the amplifier board. 

9. The method of claim 1, wherein the started process comprises the screen reader 
application and wherein performing the pre-defined transaction terminal function further 
comprises performing a screen reader application function selected from a group of screen 

15 reader application functions consisting of converting text-to-speech and providing a screen 
layout with navigation selections exclusively by touchscreen. 

10. The method of claim 1, wherein the started process comprises the session manager 
and wherein performing the pre-defined transaction terminal function further comprises 
performing a session manager function selected from a group of session manager functions 

20 consisting of bringing up a browser, coordinating one of a customer session, an operator 
session, and a hardware diagnostics session, supporting one of a transaction terminal start 
function and a transaction terminal stop function, displaying an out-of-service transaction 
terminal screen, recovering from an out-of-service condition of the transaction terminal, 
reporting pre-selected transaction terminal status information, reporting one of an out-of- 

25 service and a back-in-service condition of the transaction terminal, and reporting a state of 
the transaction terminal as one of in use, idle, diagnostics running, and back administration 
utility running. 

1 1 . The method of claim 1, wherein the started process comprises the device manager and 
wherein performing the pre-defined transaction terminal function further comprises 

30 performing a device manager function selected from a group of device manager functions 
consisting of coordinating and allocating one of a cash dispensing module, a depositor, a 
dynamic reader, a touchscreen, a printer, a switch, and an indicator. 

12. The method of claim 1, wherein the started process comprises the system manager 
and wherein performing the pre-defined transaction terminal function further comprises 
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performing a system manager function selected from a group of system manager functions 
consisting of fransaction terminal status monitoring, inquiry and control commands, file 
transfer and remote command execution, software distribution, remote peruse, log upload, 
auto configuration, load balancing support, device MIS, customer MIS, and time 
5 synchronization. 

13. The method of claim 1, wherein the started process comprises the diagnostics 
application and wherein performing the pre-defined transaction terminal function further 
comprises performing a diagnostics application function selected from a group of diagnostics 
application functions consisting of executing diagnostics requests, communicating with a 

1 0 physical device handler, diagnostic testing of a peripheral device, and providing a list of 
devices to a client. 

14. The method of claim 1, wherein the started process comprises the intelligent 
maintenance panel and wherein performing the pre-defined transaction terminal function 
further comprises performing an intelligent maintenance panel function selected from a group 

1 5 of intelligent maintenance panel functions consisting of obtaining status of one of a session 
and a device, performing one of a shutdown and a reboot through an operator request, 
performing an operator interface log on via an operator selection, allowing a service mode 
entry, and requesting a diagnostic test. 

1 5 . The method of claim 1 , wherein the started process comprises the log manager and 
20 wherein performing the pre-defined transaction terminal function further comprises 

performing a log manager function selected from a group of log manager functions consisting 
of maintaining a business log and maintaining a runtime log. 

1 6. The method of claim 1 , wherein the started process comprises the installation 
framework and wherein performing the pre-defined transaction terminal function further 

25 comprises performing an installation framework flmction selected from a group of 

installation framework functions consisting of distribution of software release packages, 
activation of software release packages, cutover of software release packages, fallback to a 
previously running version of software, and backing out of a last distributed software release 
package and reinstalling a previous software versions. 

30 17. The method of claim 1, wherein the started process comprises the configuration 
framework and wherein performing the pre-defined transaction terminal function flirther 
comprises performing a configuration framework function selected from a group of 
configuration framework functions consisting of installing and configuring software and 
configuring the transaction terminal. 
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18. A system for providing worldwide web content, centralized management, and local 
and remote administration for a self-service transaction terminal, comprising: 

means for receiving a request for a startup of at least one transaction terminal process 
of the transaction terminal selected &om a group of transaction terminal processes consisting 
of a system monitor, an audio application, a screen reader application, a session manager, a 
device manager, a system manager, a diagnostics application, an intelligent maintenance 
panel, a log manager, an installation framework, and a configuration framework; 

means for starting the requested process; 

means for performing at least one pre-defined transaction terminal function by the 
started process; and 

if a command to shutdown is received, means for coordinating an orderly shutdown of 
the transaction terminal. 

19. The system of claim 1 8, wherein the means for receiving the request further 
comprises a process controller of the transaction terminal. 

20. The system of claim 1 8, wherein the means for receiving the request, starting the 
requested process, and coordinating an orderly shutdown further comprises a process 
controller of the transaction terminal coupled to one of an integrated network control and an 
operator interface. 

21. The system of claim 20, wherein the means for receiving the request further 
comprises the process controller coupled to the integrated network control over a network. 

22. The system of claim 20, wherein the means for receiving the request further 
comprises the process controller coupled to an operator interface touchpoint consisting of one 
of a fi-ont screen of the transaction terminal, a personal computer on a network, a video 
screen, and a personal data assistant. 

23 . The system of claim 1 8, wherein the means for starting the requested process by the 
process controller further comprises at least one of means for monitoring the started process 
by the process controller, means for restarting the started process by the process controller, 
means for rebooting a transaction terminal system by the process controller, and means for 
maintaining a registry of the started process by the process controller. 

24. The system of claim 1 8, wherein the means for starting the process comprises means 
for starting the system monitor and wherein the means for performing the pre-defined 
transaction terminal function further comprises means for performing a system monitor 
function selected from a group of system monitor functions consisting of blanking a screen 
display, unblanking the screen display, resetting a hardware watchdog timer, resetting a 
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hardware watchdog timeout value, and sending a system reset notification to an integrated 
network control. 

25 . The system of claim 1 8, wherein the means for starting the process comprises means 
for starting the audio application and wherein the means for performing the pre-defmed 
transaction terminal function further comprises means for performing an audio application 
function selected from a group of audio application functions consisting of controlling 
routing of an audio amplifier output, controlling an audio amplifier board, and diagnostic 
testing of the amplifier board. 

26. The system of claim 1 8, wherein the means for starting the process comprises means 
for starting the screen reader application and wherein the means for performing the pre- 
defined transaction terminal function further comprises means for performing a screen reader 
application function selected from a group of screen reader application functions consisting 
of converting text-to-speech and providing a screen layout with navigation selections 
exclusively by touchscreen. 

27. The system of claim 1 8, wherein the means for starting the process comprises means 
for starting the session manager and wherein the means for performing the pre-defined 
transaction terminal function further comprises means for performing a session manager 
function selected from a group of session manager functions consisting of bringing up a 
browser, coordinating one of a customer session, an operator session, and a hardware 
diagnostics session, supporting one of a transaction terminal start function and a transaction 
terminal stop function, displaying an out-of-service transaction terminal screen, recovering 
from an out-of-service condition of the transaction terminal, reporting pre-selected 
transaction terminal status information, reporting one of an out-of-service and a back-in- 
service condition of the transaction terminal, and reporting a state of the transaction terminal 
as one of in use, idle, diagnostics running, and back administration utility running. 

28 . The system of claim 1 8, wherein the means for starting the process comprises means 
for starting the device manager and wherein the means for performing the pre-defined 
transaction terminal function further comprises means for performing a device manager 
function selected from a group of device manager functions consisting of coordinating and 
allocating one of a cash dispensing module, a depositor, a dynamic reader, a touchscreen, a 
printer, a switch, and an indicator. 

29. The system of claim 18, wherein the means for starting the process comprises means 
for starting the system manager and wherein the means for performing the pre-defmed 
transaction terminal function further comprises means for performing a system manager 
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function selected from a group of system manager functions consisting of transaction 
terminal status monitoring, inquiry and control commands, file transfer and remote command 
execution, software distribution, remote peruse, log upload, auto configuration, load 
balancing support, device MIS, customer MIS, and time synchronization. 
5 29 . The system of claim 1 8, wherein the means for starting the process comprises means 
for starting the diagnostics application and wherein the means for performing the pre-defined 
transaction terminal function further comprises means for performing a diagnostics 
application function selected from a group of diagnostics application functions consisting of 
executing diagnostics requests, communicating with a physical device handler, diagnostic 
1 0 testing of a peripheral device, and providing a list of devices to a client. 

30. The system of claim 1 8, wherein the means for starting the process comprises means 
for starting the intelligent maintenance panel and wherein the means for performing the pre- 
defined transaction terminal function further comprises means for performing an intelligent 
maintenance panel function selected from a group of intelligent maintenance panel functions 

1 5 consisting of obtaining status of one of a session and a device, performing one of a shutdown 
and a reboot through an operator request, performing an operator interface log on via an 
operator selection, allowing a service mode entry, and requesting a diagnostic test. 

3 1 . The system of claim 1 8, wherein the means for starting the process comprises means 
for starting the log manager and wherein the means for performing the pre-defined 

20 transaction terminal function further comprises means for performing a log manager function 
selected from a group of log manager functions consisting of maintaining a business log and 
maintaining a runtime log. 

32. The system of claim 18, wherein the means for starting the process comprises means 
for starting the installation framework and wherein the means for performing the pre-defined 

25 transaction terminal function further comprises means for performing an installation 

framework function selected from a group of mstallation framework functions consisting of 
distribution of software release packages, activation of software release packages, cutover of 
software release packages, fallback to a previously running version of software, and backing 
out of a last distributed software release package and reinstalling a previous software 

30 versions. 

33. The system of claim 18, wherein the means for starting the process comprises means 
for starting the configuration framework and wherein the means for performing the pre- 
defined transaction terminal fimction further comprises means for performing a configuration 
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framework function selected ftom a group of configuration framework functions consisting 
of installing and configuring software and configuring the transaction terminal. 

34. A method for providing worldwide web content, centralized management, and local 
and remote administration for a self-service transaction terminal, comprising: 

5 receiving a request for a startup of at least one transaction terminal process by a 

process controller of the transaction terminal from one of an integrated network confrol and 
an operator interface; 

starting the requested process by the process controller; 

performing at least one pre-defined transaction terminal function by the started 
10 process; and 

if a command to shutdown is received, coordinating an orderly shutdown of the 
transaction terminal by the process controller. 

35 . The method of claim 34, wherein receiving the request further comprises receiving 
the request from the integrated network control over a network. 

1 5 36. The method of claim 35, wherein receiving the request fiirther comprises receiving 
the request from the integrated network control coupled over the network to a plurality of 
self-service transaction terminals. 

37. The method of claim 34, wherein receiving the request fiirther comprises receiving 
the request from an operator interface touchpoint consisting of one of a front screen of the 
20 transaction terminal, a personal computer on a network, a video screen, and a personal data 
assistant. 
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ABSTRACT 

A method and system for providing global self-service transaction terminals or 
automatic teller machines (ATMs) affords worldwide web content to ATM customers, 
centralized management for ATM operators, and supports local and remote administration for 
5 ATM field service personnel. The system includes multiple ATMs coupled over a network to 
a host, and the ATMs are provided with a touch screen interface and an interface for visually 
impaired persons. The ATMs enable both local and remote administration of ATM 
operations by bank personnel and an integrated network control. The ATMs are web- 
enabled, and ATM communications are performed over a communications network. 
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Mv residence, post office address and citizenship are as stated below next to my name. O U I O 0 f 0 ^ f 

I believe I am the original, first and sole inventor (if only one name is listed below) or an origmal, first andjomt mventor (if 
plural names are listed below) of the subject matter which is clauned and for which a patent is sought on the mve^on 
entitled System and Method for Providmg Global Self-Service Financial Transaction Termmals with Worldwide Web Content, 
Centralized Management, and Local and Remote Admmistration; the specification of which 

^ is attached hereto. 

□ was filed on — — ■ 



□Application Serial No . — 

and was amended on ^ : (if applicable) 

I hereby state that I have reviewed and understand the contents of the above identified specification, mciudmg the claims, as 
amended by any amendment referred to above. 

I acknowledge the duty to disclose information which is material to patentability as defmed in Title 37, Code of Federal 
Regulations, §1.56. 

I hereby claun foreign priority benefits under Title 35, United States Code, §1 19 of any foreign application(s) for patent of 
mventor's certificate listed below and have also identified below any foreign application for patent or mventor s certificate 
havmg a filmg date before that of the appHcation on which priority is claimed: 

. „ . i f ^- / ^ Priority Claimed 

Prior Foreign Apphcation(s) 



'^^^v) (Countiy) (Day/MonthAf ear Filed) Yes No 

^i^^r) (Country) (Day/MonthA'ear Filed) Yes No 

I hereby claim the benefit under Title 35, United States Code, §120 of any United States application(s) Hsted below and insofar 
as the subject matter of each of the claims of this application is not disclosed m the prior United States application m the manner 
provided by the first paragraph of Title 35, United States Code §1 12, 1 acknowledge the duty to disclose material to patentability 
as defmed in Titie 37, Code of Federal Regulations, §1.56 which be came available between the filing date of tiie prior application 
and the national or PCT international filmg date of this application: 

60/152,183 Se ptember 2. 1999 Pending 

(Application Serial No.) (Filmg Date) (Statiis) , . 

(patented, pendmg, abandoned) 



(Application Serial No.) (Filing Date) (Status) . . 

^ (patented, pendmg, abandoned) 

I hereby declare that all statements made herem of my own knowledge are tine and that all statements made on information arid 
beUef are believed to be true, and ftirther that these statements were made with the knowledge that willfiil false statements and the like 
so made are punishable by fme or imprisomnent, or both, under Section 1001 of Titie 18 of the United States Code and that such 
willfiil false statements may jeopardize the validity of the appHcation or any patent issued thereon. 
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English Language Declaration 




POWER OF ATTORNEY: As a named inventor, I hereby appoint the following attomey(s) and/or 
agent(s) to prosecute this appHcation and transact all business in the Patent and Trademark Office 
connected therewith. 

^ , ^ -n • * „+: -vT,^ i-i ni A- Riniinrrl Peterson Reeistration No. 35,320; Charles W. 

Georae T Marcou, Registration No. iJ,Ul4, KJcnara reieibun, ivcgiauciuvj ^ ' 

cSs, Registration No. 3 1,814; Jolm M. Harrington. Registration No. 25.592; A. Jose Cort™ 

Registration No. 29,733; James J. Bindseil, Reg. No. 42,326; Benjamm DnscoU, Registratton No^ 

4r571- Yonoha L. ktmdupoglu, Registration No. 41.130; R. Whitney Wmston, Reg,s«:atton No. 44,432, 

Joto )3all. Registration No 44,433; Dawn-Marie Bey, Registration No. 44,442; and Tiep Nguyen, 

Registration No. 44,465. 


Send Correspondence to: Direct telephone calls to: 




George T.Marcou SoTf ^O^s' " 
Kilpatrick Stockton LLP (202) 508-5800 
- Suite 800 

700- 13th Street, N.W. 
Washington, D.C. 20005 






Full name of first inventor: Theodore L Krawiec 






First Inventor's Signature Date 






Residence Address: 21433 Pacific Ocean Highway, Malibu, CA. 90265 






Citizenship: United States 






Post Office Address: 21433 Pacific Ocean Highway, Malibu, CA. 90265 












Full name of second inventor: Stephen M. Gryte 






Second Inventor's Signature Date 






Residence Address: 12672 Dewey Street, Los Angeles, CA. 90066 






Citizenship: Canadian 






Post Office Address: 12677 Dewey Street, Los Angeles, CA. 90066 
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Full name of third inventor: John Frederick Riblett 



Third Inventor's Signature 

Residence Address: 1 1260 Overland Avenue #17A, Culver City, CA. 90230 



Citizenship: United States 

Post Office Address: 1 1 260 Overland Avenue #1 7A, Culver City, CA. 90230 



Full name of fourth inventor: Chris Shu- Wing Yu 



Fourth Inventor's Signature 

Residence Address: 15597 La Subida Drive, Hacienda Heights, CA. 91745 



Citizenship: United States 

Post Office Address: 1 5597 La Subida Drive, Hacienda Heights, CA. 91745 
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